Date: Fri, 21 Dec 2001 15:23:54 +0800 From: Yusuf Goolamabbas <yusufg@outblaze.com> To: Luigi Rizzo <rizzo@aciri.org> Cc: freebsd-net@FreeBSD.ORG, freebsd-stable@FreeBSD.ORG, cez@pkl.net Subject: Re: 4.4-stable kernel panic with dummynet/bridging. Same rules work fine with 4.3-RC Message-ID: <20011221152354.A11744@outblaze.com> In-Reply-To: <20011220230814.A11342@iguana.aciri.org> References: <20011220111545.3327.qmail@yusufg.portal2.com> <20011220124859.A8969@iguana.aciri.org> <20011221120215.A10482@outblaze.com> <20011220230814.A11342@iguana.aciri.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Dec 20, 2001 at 11:08:14PM -0800, Luigi Rizzo wrote:
> On Fri, Dec 21, 2001 at 12:02:15PM +0800, Yusuf Goolamabbas wrote:
> > >
> > > How repeatable is the problem ? It shouldn't be hard to track, it looks
> > > like a null pointer dereference.
> >
> > 100% repeatable. The strange part is that the same rules including the
> > ${fwcmd} add 400 pass udp from 0.0.0.0 2054 to 0.0.0.0 work perfectly
> > with 4.3-RC
>
> the rule is just useless. do you have a sample case to trigger the
> problem so i can try and see what is going on ?
>
range and office are edited out
This is what I have, the basic idea is that fxp1 is connected to a
switch and I want each machine on the switch to be restricted to 512kb/s
${fwcmd} add 100 pass all from any to any via lo0
${fwcmd} add 200 deny all from any to 127.0.0.0/8
${fwcmd} add 300 deny ip from 127.0.0.0/8 to any
# If you're using 'options BRIDGE', uncomment the following line to pass
ARP
${fwcmd} add 400 pass udp from 0.0.0.0 2054 to 0.0.0.0
${fwcmd} add 500 pass all from ${range} to any in via fxp0
${fwcmd} add 800 pipe 1 ip from ${range} to not ${office} in via fxp1
${fwcmd} pipe 1 config mask src-ip 0x000000ff bw 512Kbit/s queue 50
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011221152354.A11744>